Configuring Microsoft Entra Connect Sync for Group Synchronization

Before you import objects from Microsoft Entra ID, configure Microsoft Entra Connect Sync to synchronize the objectGUID attribute of on-premises groups and users to Microsoft Entra ID.

Important:

Only the following settings are required for the Endpoint Security integration with Microsoft Entra ID:

  • Directory extension attribute sync in the Optional features window

  • objectGUID (group) [Binary] in the Directory extensions window

The remaining wizard settings are optional. Configure them as necessary.

To configure Microsoft Entra Connect Sync for group synchronization:

  1. Open Azure AD Connect.

    The Welcome window appears.

  2. Click Configure.

    The Additional tasks window appears.

  3. Select Customize synchronization options and click Next.

    The Connect to Microsoft Entra ID window appears.

  4. Enter the username of a Microsoft Entra ID Hybrid Identity Administrator or Global Administrator, and click Next.

    The Sign in to your account window appears.

  5. Enter the password and click Sign in.

    The Connect your directories window appears.

  6. In the Configured Directories section, verify that the on-premises directory appears, and then click Next.

    The Domain and OU filtering window appears.

  7. Configure the domain and OU synchronization settings as required and click Next.

    The Optional features window appears.

  8. Select the Directory extension attribute sync checkbox and then click Next.

    The Directory extensions window appears.

  9. In the Available Attributes search field, enter objectGUID.

  10. Select objectGUID (group) [Binary] and then click > to add it to the Selected Attributes list.

  11. Verify that the attribute appears in the Selected Attributes list, and then click Next.

    The Ready to configure window appears.

  12. Click Configure.

    The system completes the configuration process.

  13. In the Configuration complete window, click Exit.